Function createWebhooksRouter

server/src/routes/webhooks.ts:1109–1690

()

 * Create webhook routes router
 */
export function createWebhooksRouter(): Router {
  const router = Router();

  // =========================================================================
  // Luma Webhooks
  // =========================================================================

  router.post('/luma', async (req: Request, res: Response) => {
    const requestStartTime = Date.now();

    // Verify webhook authenticity via signing secret
    const LUMA_WEBHOOK_SECRET = process.env.LUMA_WEBHOOK_SECRET;
    if (!LUMA_WEBHOOK_SECRET) {
      logger.warn('Luma webhook rejected: LUMA_WEBHOOK_SECRET not configured');
      return res.status(503).json({ error: 'Webhook validation not configured' });
    }
    const providedSecret = req.headers['x-luma-signing-secret'] as string | undefined;
    if (providedSecret !== LUMA_WEBHOOK_SECRET) {
      logger.warn('Luma webhook rejected: invalid signing secret');
      return res.status(401).json({ error: 'Unauthorized' });
    }

    try {
      logger.debug({ action: (req.body as Record<string, unknown>)?.action }, 'Received Luma webhook');

      const payload = parseLumaWebhook(req.body);
      if (!payload) {
        logger.warn('Invalid Luma webhook payload structure');
        return res.status(400).json({ error: 'Invalid payload' });
      }

      logger.info({
        action: payload.action,
        apiId: payload.data.api_id,
      }, 'Processing Luma webhook');

      switch (payload.action) {
        case 'guest.created':
          await handleLumaGuestCreated(payload);
          break;
        case 'guest.updated':
          await handleLumaGuestUpdated(payload);
          break;
        case 'event.updated':
          await handleLumaEventUpdated(payload);
          break;
        case 'event.created':
          await handleLumaEventCreated(payload);
          break;
        case 'event.deleted':
        case 'event.cancelled':
          await handleLumaEventCancelled(payload);
          break;
        default:
          logger.warn({ action: payload.action }, 'Unknown Luma webhook action');
      }

      const totalDurationMs = Date.now() - requestStartTime;